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Abstract 

We consider the problem of determining a rational point {x,y), of 
infinite order, on the elliptic curve y'^ = + ax^ + bx. The well- 
known method of 4-descent has proven very effective, and we give 
explicit formulae for the various stages. For points of large height, 
however, there can still be a significant search to be done. We describe 
a very simple idea which essentially doubles the height range which 
can be dealt with in a reasonable time. Currently, the largest point 
found has height 51.15 or 102.3 (depending on which normalisation 
you use). The report is written in an algorithmic style and should be 
understandable by the interested amateur. 
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1 Introduction 



Many Diophantine problems can be reduced to determining points on ellip- 
tic curves. A fascinating example is from Bremner et al f^, where finding 
possible representations of n as 



is shown to be equivalent to finding points of infinite order on the elliptic 
curve 



The rank of En can be estimated from the L-series of the curve, assuming 
the Birch & Swinnerton-Dyer conjecture, but this just provides evidence of 
existence. For an actual representation, we need to explicitly find a rational 
point. If the curve has rank greater than 1, it is usually fairly simple to find 
a point by a trivial search. For rank 1 curves, however, this is often not 
feasible. The L-series computations can be extended to give an estimate for 
the height of a rational point of the curve. If this is large, then a simple 
search will take far too long. 

Recently, Silverman produced a very nice and effective procedure to 
determine such points. Based on a preprint of this paper, the author coded 
the method in UBASIC, and used it on several families of elliptic curves 
from Diophantine problems. This usage has shown that the method starts to 
become time-consuming for heights greater than about 10 in the Silverman 
normalisation - 20 in the alternative (from now on all heights will be in the 
Silverman normalisation). 

If the curve has a rational point of order 2, we can use a 4-descent proce- 
dure to calculate the point, which we have found to be effective up to heights 
of about 15. By effective we mean that a point can usually be found in a 
matter of minutes on a 200MHz PC with a program written in UBASIC. 
If one is willing to wait several hours, the height barrier can obviously be 
increased. It should be noted that Silverman's method works just as well on 
curves with no rational points of order 2, and so is more general. 



n= {x + y + z) -H h 

\x y 





En-.u^ = v^ + (ra^ - 6n - 3)t;^ + IQnv 
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2 Four- descent 



The following set of formulae describe the algebra necessary to perform a 
general four-descent procedure for the elliptic curve 

= + ax^ + hx (1) 

so the curve is assumed to have at least one point of order 2. This discussion is 
purely concerned with computing a rational point, and not with determining 
the rank, and so is not as general as Cremona's mwrank program, described 
in i. 

We can assume without loss of generality that x = dvF'/v'^ and y = 
duw/v^, with d squarefree and (c?, f) = 1, giving 

dW = d\^ + d\u\^ + dhv^ (2) 

which implies that c?|6, so that h = de. There are thus a finite set of possible 
values for d, which we can work out easily from the factors of b, unless b is 
very large and difficult to factor. Remember that d can be negative. 
Consider first the simpler quadratic 

= df + afg + eg^ (3) 

and look for a solution (/iq, fo,go) either by searching or by more advanced 
methods, and assume go 0. 

If we find a solution, we can parameterise as follows. Define x = f / g and 
y = h/g, so that the equation is 

y'^ = dx^ + ax + e 

then the line through (xo,?/o) = {fo/ 90, ho/ go), with gradient m, meets the 
curve again where 

a + dxo + m(mxo — 2yo) , . 

^ = 2 ^ (^) 

— d 

Assuming m = p/q is rational, we simplify this to 

agoq^ + dfoQ^ + p{foP - 2hoq) , . 

go{p^ - dq^) ^ ^ 
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To solve our original problem we look for values of the parameters giving 
f / g — K^/v^, which leads to the two quadratics 

ku^ = gop^ - godq^ (6) 

and 

kv'^ = foP^ - + {ago + dfo)q^ (7) 

with k squarefree. 

The possible values of k are those which divide the resultant of the two 
quadratics, which means that k must divide the determinant 
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which reduces to gQ{a^ — 46). Let ko be a squarefree divisor (again possibly 
negative). 

We search the first of these quadratics to find a solution (mo,Po,?o)- If 
we find one, another simple line-quadratic intersection analysis characterises 
the solutions to the first quadratic as 

p = 2uokors - poigos^ + kor"^) (8) 

and 

q = qoigos^ - kor"^) (9) 
Substitute these into ko* (7), giving the quartic 

= zir'^ + Z2r^s + z^r'^s^ + z^rs"^ + z^s'^ (10) 

with 

zi = kl{agQql + df^ql + fopl - 2hoPoqo) (H) 

Z2 = Auok^{hoqo - /oPo) (12) 

^3 = '2kl{fo{2ulko - dgoql + gopl) - aglql) (13) 
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= -4:Uogokl{fopo + /logo) 



(14) 



Z5 = Qohiagoql + df^ql + fopl + 2hoPoqo) (15) 

This quartic can then be searched for possible solutions. Having found 
one, the various transformations eventually lead back to a point on the curve. 

3 COMPUTING 

The above formulae form the basis of a simple code written by the author in 
UBASIC. This system is fast, simple, free, and runs on a multitude of PC's, 
old and new. The major advantage, however, is that large numbers can be 
dealt with by one single statement at the start of the program - the rest of 
the code is standard Basic. Constructing a UBASIC code also leads to a 
structure which can easily be translated into Fortran, C, C++, etc using the 
many multiple-precision packages available in these languages. 
The basic structure of the algorithm is 

find divisors d of b 
for si = sla to sib 

test if h"^ = dp + afg + eg'^ soluble with |/| + \g\ — si 
if {d, ho, /o, go) a solution then 
find divisors k of go{(i^ — 46) 
for s2 =2 to s2b 

test if ku'^ = gop^ — godq^ with \p\ + \q\ = s2 

if {ko,Uo,po,qo) a solution, then 

form quartic equation from equations (10) to (15) 

test if quartic is soluble, and if it is 

for s3=2 to s3b 

test if quartic is square for |r| + |s| = s3 
if it is, determine point on curve, and stop 
next s3 
next s2 
next si 

If the curve has a rational point of moderate height, the above search- 
based procedure works very well. We have found the method to be effective 
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for points with height of up to about 15, if we select s2b=99 and s3b=199. 
It is impossible to predict in advance the best choice of sla and sib. 

For larger heights, the quartic search needs a larger value of s3b and can 
take a considerable time. In many cases, the quartic is insoluble so searching 
is futile. Cremona describes how to test this, based on ideas from Birch 
and Swinnerton-Dyer [^, and we have implemented this test as a precursor 
to searching. This method is probably the most advanced mathematically 
in the whole procedure. It is also a vital time-saving procedure since the 
majority of quartics are not soluble. 

Cremona also describes various methods for searching the quartic which 
reduce the time taken. We have chosen NOT to implement these, partly to 
keep the code reasonably understandable by amateurs, and partly because 
UBASIC has restrictions on the number of variables. These methods are 
only effective time-savers if s3b is large. 

For investigating families of curves where a and h are functions of n, we 
found the simple search for (/iq? foiQo) could fail to find any solutions in the 
specified range. In such a case we can adapt the search as follows. If 

= df + afg + bg^d 

then 

d{2hf = {2df + agf - (a^ - 46)/ 
and if we factor a? — Ah = af]"^ with a squarefree, 

dH^ = F^- aG^ (16) 

with F = 2df + ag, G = j3g, H = 2h. From a (Fq, Gq, Hq) solution, we can 
recover integer solutions to the original equation as /o = i3Fq — aGo, go = 
2dGo, ho = d(5Ho. 

In equation (6), it is clear that (±mo, ±po, ±90) satisfy the equation. We 
do not, however, need to consider all 8 possible combinations of sign. From 
(11) to (15), the sign of Uq is irrelevant if we allow negative values of r or s. 
Similarly, —po and —go lead to the same quartic as po and go; and the other 
two possible combinations give the same quartic. Thus there are only two 
essentially different quartics, and it is easy to show the relationship between 
them implies that they are both soluble or both insoluble. It is worthwhile 
to search both (if soluble), as the coefficients are different so the fixed search 
range might give a solution for one but not the other. 
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At several points in our code, we need to factor numbers to find divisors. 
Tliis is done by an extremely simple-minded search procedure, without re- 
course to any modern factorisation techniques. So far, this has not had a 
severe effect on the performance of the code, but one could easily devise an 
elliptic curve where the factorisation time was dominant. The current code 
has the advantage that is is short. 

Finally, it should be noted that the method could easily find a torsion 
point of the curve, and not a point of infinite order. Since the latter is usually 
wanted, the code checks that the point found is not a torsion point from a 
list of X- values provided by the user. 

4 Further Descent 

As stated, the above method begins to become time-consuming at certain 
heights. In such cases, several workers have resorted to impressive further 
descents to determine rational points. A classic example is the work of Brem- 
ner and Cassels on the curve = +px, see 0. These methods seem to be 
very problem-dependent and to involve manipulations in algebraic number 



The author was interested in a general method of higher descent which 
does not involve anything more than rational arithmetic - especially for use 
by the many amateurs interested in Diophantine equations. The following 
method is based on a remarkably simple idea. The author cannot believe 
this has not been thought of before, but can find no direct reference to the 
idea. 

The problem in the 4-descent for large heights is the determination of 
(r, s) values giving a square quartic. Suppose 

zir^ + Z2r^s + Zar^s^ + z^rs^ + 2^3'^ = (uir^ -|- U2rs + Uss^) (f ir^ + V2rs + v^s^) 



with ui,U2,U3,vi,V2-,V3 integers, then we can consider the following two 
quadratics 



fields. 



(17) 



Mir^ + U2rs + u-^s^ = kim^ 



(18) 



vir + V2rs + v^s = kit 



(19) 
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with ki squarefree. As before ki divides the resultant, which is 

ulvl — U1U2V2V3, - 2uiUsViV3, + + ulviVs - U2U3V1V2 + ulvf (20) 

Suppose we find a solution {ki, ti,ri, si) to the second quadratic, then we 
can parameterise as 

r = fkin - 2ijkiti + finvi + S1V2) (21) 

s ^ siit'ki - fvi) (22) 

which, when substituted into ki * (18), requires the following quartic to be 
square 

cii^ + C2i^j + csi^f + c^if + c^f (23) 

with 

ci = kl{rlui + riSiU2 + sluz) (24) 

C2 = -2klti{2riUi + S1U2) (25) 

C3 = kl{Akit\ui + 2r\uiVi + 2riSiUiV2 + s\{u2V2 - 2u^vi)) (26) 

C4 = —2k\ti{2riUiVi + si{2uiV2 — U2V1)) (27) 

C5 = ki{r\uivl + riSiVi{2uiV2 — U2V1) + sl{uiV2 — vi{u2V2 — U3V1))) (28) 
This quartic can be tested for solubility and then searched. 

5 Computing the 8-descent 

The basic structure of the algorithm is obviously very similar to the 4-descent 
structure. 
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find divisors d of b 

for si = sla to sib 

test if h"^ = dp + afg + eg^ soluble with |/| + \g\ = si 
if (d, /lo, /o, fi'o) a solution then 
find divisors k of go{a'^ — 46) 
for s2 = 2 to s2b 

test if ku"^ = gop"^ — godq"^ with |p| + |g| = s2 

if {kQ,Uo,po,qo) a solution, then 

form quartic equation from equations (10) to (15) 

test if quartic soluble, and if so 

test if quartic can be factored into 2 integer quadratics 
if so, find possible values of ki 
for s3=2 to s3b 

test if kit"^ = vir^ + V2rs + ^35^ with |r| + |s| < s3 
if {ki,ti,ri, si) a solution, form quartic (20) 
test if quartic soluble, and if it is 
for s4=2 to s4b 

test if Cii^ + C2i^j + c^i'^j'^ + c^ij^ + c^j'^ square 
if it is, use various transformations to find point and stop 
next s4 
next s3 
next s2 
next si 

The factorisation of the quartic is accomplished by considering the equa- 
tions: 

Zi = UiVi 

Z5 = UsVs 

Z2 = U1V2 + V1U2 
Z4 = U3V2 + V3U2 
Z3 = U1V3 + U2V2 + U3V1 

We thus have to factorise Zi and Z5. For each possible sphtting, we solve 
the third and fourth equations for U2 and V2- If the solutions are integers we 
test whether the 6 values satisfy the last equation. Wc found that quadratics 
which themselves split into 2 linear factors lead to torsion points, so we test 
whether the quadratics have rational roots, and reject those which do. 
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6 Numerical Examples 



In this section we give some examples of the use of the 8-descent method, 
with some specimen timings on either a 200MHz or 300MHz PC. It is clear 
that timings are dependant on the search parameters, so we specify the values 
of (s2b,s3b,s4b). sla is set to 2 and we search until a solution is found. 

(a) Congruent numbers N are integers which can be the area of a rational 
right-angled triangle. Finding the sides of such a triangle is equivalent to 
finding a point of infinite order on the elliptic curve = — N'^x. 

One of the most famous of these numbers is = 157, since it forms 
the basis of an impressive diagram in Chapter 1 of Koblitz's book 0, where 
the sides involve numbers with 20-30 digits. An L-series calculation gives 
the height of a point as 27.3. Running the program with s2b=s3b=99 and 
s4b=199 finds the point with x-coord 

-1661 3623 1668 1852 6754 0804 
28 2563 0694 2511 4585 8025 

in 18.8 sees (200MHz). With s4b=99 it takes only 7.0 sees, while for s4b=499 
it takes 31.5 sees. But, with s4b=599 the time goes down to 28.3 sees, and 
if s4b=699 the time is only 9.0 sees. The variation is due to the number of 
quartics which need to be searched. Up to 499 it takes 22 quartics, but 599 
needs only 4, while 699 finds a point on the first. The important point is 
that it takes less than 1 minute to find such a large point. Even an ancient 
80387 machine finds this point in less than 5 minutes. 

The author has used this technique in a search for actual solutions to 
the congruent number problem for 1 < iV < 1999. The current method 
has led to the completion of a table of solutions for [1,499]. The largest 
height encountered was 51.15 for = 367. Searching with s2b=s3b=99 and 
s4b=9999, the following solution was found on a 300MIIz machine in 17595 
sees. 

_ -367(4 9695 3629 60851360 8777)2 
^ ~ (163 8216 8821 6485 0643 1464)2 

It is perfectly possible that the modular form Heegner-point method of 
Elkies could find this point much faster, but this method is much more 
difficult for the non-expert to understand. Elkies method also does not gen- 
eralise to other families of curves. 
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Since x^—N'^x = x(x—N)(x+N), we can change the origin to produce the 
two equivalent elhptic curves y"^ = x^±3Nx'^+2N^x. They may be equivalent 
mathematically, but their performance computationally is not the same. The 
author has found several solutions to the congruent number problem from 
these curves having been unsuccessful with the original curve. This also 
happens in other families of elliptic curves with 3 rational points of order 2. 

(b) The paper of Bremner et al mentioned in the introduction has a 
representation oi N — 564 in its abstract. The L-series computation predicts 
a point with height 38.01. A 300MHz PC found a solution in 4497 sees, with 
s2b=s3b=99 and s4b=9999. This solution leads to a representation with 

X = 32736 87951 95203 44322 22320 98479 60433 77911 47254 01060 

y = 53 58267 18225 66098 96868 10234 90522 46809 90105 26717 
z = - 1158 25525 22781 02629 66659 36639 59067 36616 11576 01937 

(c) The paper of Bremner and Cassels describes the finding of a point 
on = x^ + 877x. The L-series predicts a height of 48.0. A 300MHz 
PC finds the following x-coordinate in 51874 seconds with s2b=s3b=99 and 
s4b=12999 

_ 877 (7884 1535 8606 8390 0210)^ 
^~ (6 1277 6083 1879 4736 8101)^ 

(4) The final example is included for historical reasons, since it was the 
first time that the author tried the idea of factorising the quartic. Since this 
was the start of the current research, clearly the computer programs used in 
the previous examples were not available. The computations were done by 
simple searches and algebraic manipulation with Derive. 

The problem comes from the diophantine problem of finding an integer 
triangle with base/altitude = n. For n = 79, we consider the equation 
y^ = x'^ + 6243a;^ + x. The L-series computations suggested rank 1, but 
with a height of over 40 for a rational point. The 2-isogenous curve is = 
x^ — 12486a;^ -|- 38975045a;, which was indicated to have a point with height 
about 20. 

The author selected to try d = 5, which meant looking first for solutions 
of /i^ = 5/^ — 12486/(7 + 7795009^'^. A very simple search program quickly 
finds f — 93,g — l,h — 2584, which means (6) and (7), are 

ku^ — — 
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kv"^ = 93p2 - 5168pq - 12021?^ 

where A; = ±1. We selected A; = 1. 

It is possible to parameterise the first as p = r^ + 5s^,g = 2rs, which gives 

^;2 = 93^4 _ io336r^s - m54:r^s^ - SlGSOrs^ + 2325s^ 

which Derive fairly easily factors as 

^2 = (3r2 - 340rs - 775s^){31r^ + 68rs - 3s'^) 

The two quadratic factors form the basis of (18) and (19), and we find 
that /cijlSS. Picking ki — 1, we found several (r, s) solutions to 3r^ — 340rs — 
775s^ = t^, which lead to parameterisations for r and s, but which lead to 
insoluble quartics. We then tried ki = 158, and found the solution r — 9,s — 
— l,t = 4, which gives the parameterisation 

r _ -(1422^2 + 1264ij + 367 f) 
s ~ 158^2 - 3j2 

and hence to the quartic 

316^(74892^^ + 154840i^j + 123789^^/ + 45916i/ + 6725/) 

which has to be square. 

Thus quartic was everwhere soluble, so a search was started which quickly 
found the solution i = 151, j = —158, which lead back to a point on the 2- 
isogenous curve with 

_ 283684993467631951390020 
^ ~ 46898490944992340041 
and thus to a point on the original curve with 

_ 26547926128919441996850518671 1433025 
^ ~ 170541875947725676769862564358062336 
For interested readers, this point leads to the triangle with sides 

A = 146586997184778231835321 9719440069878865747485658 

6410826213286741631164960 

B = 89276765348874858876033 6294270957750737827730811 

8665999941086255389471249 

C = 57359536918230561955378 6626779319292615973876797 

1279754707312477117108209 
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7 Further Work 



The reasonable level of success of this method for several families of elliptic 
curves provided the impetus to write this report, but there is still much work 
to be done. 

1. Translate the UBASIC code into a compiled high-level language so that 
the method can be run on non PC's, especially UNIX workstations. 

2. Try further descents on the last quartic produced. The author has 
experimented with this idea, but initial results arc disappointing in 
that the method seems to be finding multiples of a generator rather 
than the generator itself. Since the multiples have much larger height 
it is currently no benefit to try these extra descents. 

3. Try to underpin the method with some theory. The method was devel- 
oped by trying an idea, seeing it work, and improving it. The method 
does not always work, but does provide another tool in the investiga- 
tor's toolbox. 
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